Administrator's Guide - Kerio Software Archive

Kerio VPN
If another DNS server than the DNS module in Kerio Control is used in the local
network, use this option.
DNS domain extension is also assigned to VPN clients. Domain extension specifies local
domain. If the VPN client’s extension matches a local domain of the networks it connects
to, it can use hostnames within this network (e.g. server). Otherwise, full name of the host
including domain is required (e.g. server.company.local).
DNS extension can be also resolved automatically or set manually:
• Automatic resolution can be used in case that the host belongs to the Active Directory
domain and/or in case that firewall users are authenticated in this domain (see
chapter 16.1).
• DNS domain must be specified in case that it is a Windows NT domain or a network
without a domain, or in case that another domain extension is desirable (e.g. when
multiple Active Directory are mapped).
Note: DNS servers assigned by the VPN server will be used as primary/secondary DNS server(s)
on the client host. This implies that all DNS queries from the client host will be sent to these
servers. However, in most cases this kind of “redirection” has no side effects. Upon closing of
the VPN connection, the original DNS configuration will be recovered.
WINS configuration for VPN clients
The WINS service is used for resolution of hostnames to IP addresses within Microsoft Windows
networks. Assigning of a WINS server address then allows VPN clients browse in LAN hosts
(Network Neighborhood / My Network Places).
Figure 23.5
VPN server settings — specification of WINS servers for VPN clients
312